Advertisement

Research and Advances

Security in Dynamic Web Content Management Systems Applications

The processes behind corporate efforts to create, manage, publish, and archive Web information has also evolved using Web Content Management Systems (WCMS). WCMS allow teams to maintain Web content in a dynamic fashion through a user friendly interface and a modular application approach. This dynamic "on-the-fly" content creation provides Web site authors several advantages including access to information stored in databases, ability to personalize Web pages according to individual user preferences, and the opportunity to deliver a much more interactive user experience than static Web pages alone. 11 However, there are distinct disadvantages as well. Dynamically generating Web content can significantly impact Web server performance, reduce the scalability of the Web site and create security vulnerabilities or denial of service. 11 Organizations are adopting information technology without understanding such security concerns. 1 Moreover, as Mostefaoui 7 points out, even though many attempts have been made to understand the security architecture, a generic security framework is needed. Recent research amplifies the concerns and benefits of security in open source systems. 2 However, there is a need for organizations to understand how to evaluate these open source systems and this paper highlights how an evaluation technique in terms of security may be used in an organization to assess a short list of possible WMCS systems. This article focuses on security issues in WCMS and the objective is to understand the security issues as well as to provide a generic security framework. The contributions of this paper are to: 1. Integrate the goals of security with eight dimensions of WCMS, 2. Specify how to secure the eight dimensions of WCMS, 3. Formulate a framework of security using this integrated view of security goals and security dimensions, and 4. Address the security of the Web architecture at WCMS software application level using the framework and evaluate security features in popular WCMS used in the industry.
Research and Advances

Why Did Your Project Fail?

We have been developing software since the 1960s but still have not learned enough to ensure that our software development projects are successful. Boehm suggested that realistic schedule and budgets together with a continuing steam of requirements changes are high risk factors. The Standish Group in 1994 noted that approximately 31% of corporate software development projects were cancelled before completion and 53% were challenged and cost 180% above their original estimate.
BLOG@CACM

SC09 Reflections: The Need For Speed

SC09 (aka the “Supercomputing Conference”) was held during the week of November 16.  The conference set an attendance record this year – roughly 10,000 attendees at the combined conference and tradeshow – despite the economic malaise of the technology industry and the global economy. 
News

Lean, Green Machines

Designers of the German supercomputers that won the latest Green500 prize, which rewards not just computing power but energy efficiency, did not set out to win the award, but they did think carefully about energy consumption. "Nowadays, supercomputers use so much energy that it's probably more money than the purchase price," says physics professor Tilo Wettig of the University of Regensburg, so "power efficiency is extremely important."
Research and Advances

Predicting Structured Objects with Support Vector Machines

Machine Learning today offers a broad repertoire of methods for classification and regression. But what if we need to predict complex objects like trees, orderings, or alignments? Such problems arise naturally in natural language processing, search engines, and bioinformatics. The following explores a generalization of Support Vector Machines (SVMs) for such complex prediction problems.
Research and Advances

Why Web Sites Are Lost (and How They’re Sometimes Found)

The Web is in constant flux — new pages and Web sites appear daily, and old pages and sites disappear almost as quickly. One study estimates that about two percent of the Web disappears from its current location every week. To automate recovering lost Web sites, we created a Web-repository crawler named Warrick that restores lost resources from the holdings of four Web repositories.
Research and Advances

If Your Pearls of Wisdom Fall in a Forest . . .

The idea of doing things that can improve something is an extremely popular concept in American culture. For example, I found the phrase, make a difference , in 129 million Web pages in a Yahoo! search in July 2009. The concept typically applies to impacts at local levels because, until recently, few people had opportunities to do things that could positively affect substantial numbers of people throughout the country in which they live or even throughout the world. After dot com bubble burst, many investors found that the slogan that "the Internet changes everything" did not apply to many of the requirements for having a successful business. However the Internet really does provide opportunities for those who create knowledge to share it with more people who can use it to advantage, and share it more quickly than through other means. Of course, this potential capability to share materials is limited by people's abilities to find useful information in the billions of pages on the Internet. Yahoo reported indexing over 19 billion pages in 2005. (Perhaps responding to criticism of the estimates,1 the leading search engine companies no longer publish counts of pages indexed. Although no one really knows how big the "haystack" is, the simile about "finding a needle" is quite applicable to the Internet.) Nevertheless there are two aspects of innovative materials that work in favor of their being found: • The goals of search engine companies. • The nature of knowledge.

Shape the Future of Computing

ACM encourages its members to take a direct hand in shaping the future of the association. There are more ways than ever to get involved.

Get Involved

Communications of the ACM (CACM) is now a fully Open Access publication.

By opening CACM to the world, we hope to increase engagement among the broader computer science community and encourage non-members to discover the rich resources ACM has to offer.

Learn More